Connect to the Data Warehouse with Power BI

You can use the Power BI Compliance app to load interactive, dynamically generated reports for your Intune tenant. Additionally, you can load your tenant data in Power BI using the OData link. Intune provides connection settings to your tenant so that you can view the following sample reports and charts related to:

  • Devices
  • Enrollment
  • App protection policy
  • Compliance policy
  • Device configuration profiles
  • Software updates
  • Device inventory logs

There are also trends highlighted for the enrollment, compliance, device configuration profile, and software updates. Sample charts and reports apply user-friendly filters to the canvas. To use advanced filters, check out the Filter pane in Power BI Desktop.

The following steps show you how to download the Power BI file and how to use the OData link with Power BI.

Azure AD and Intune credential requirements

Authentication and authorization are based on Azure AD credentials and Intune role-based access control (RBAC). All global administrators and Intune service administrators for your tenant have access to the Data warehouse by default. Use Intune roles to provide access for more users by giving them access to the Intune data warehouse resource.

Requirements for accessing the Intune Data Warehouse (including the API) are:

  • User must be one of:
    • Azure AD global administrator
    • An Intune service administrator
    • User with role-based access to Intune data warehouse resource
    • User-less authentication using application-only authentication

Install Power BI

Install the latest version of Power BI Desktop. For more information, see Power BI Desktop

Load the data and reports using the Power BI Intune Compliance Data Warehouse App

The Power BI Intune Compliance (Data Warehouse) app contains information for your tenant and a set of prebuilt reports based on the Data Warehouse data model.

  1. Navigate to the AppSource page of the Intune Compliance (Data Warehouse) app to begin the installation process.
  2. Click the Get It Now button, and then click Continue.
  3. When prompted to install the Power BI app, click Install.
  4. After the installation completes, click on the Intune Compliance (Data Warehouse) app tile.
  5. Click the Connect button. The Connect to Intune Compliance (Data Warehouse) dialog is displayed.
  6. Click the Sign in button.
  7. Sign in with a user account that has access to the Intune Data Warehouse for the tenant that has reports you want to view.
  8. To view the included dashboard, click the Dashboards tab, then click the Compliance Overview dashboard.
  9. To view all the available reports, click the Reports tab, then click the Compliance V1.0 report. Browse through the report pages by clicking on the tabs at the bottom.
  10. To make it easy to navigate back to these reports later, click the star next to the Compliance V1.0 report. This will add the report to your Power BI favorites.

Alternatively, you can install the app from the Intune portal:

  1. Sign in to the Azure portal and choose Monitoring + Management > Intune. You can also search resources for Intune.
  2. Open the Set up Intune Data Warehouse blade.
  3. Select Get Power BI App to access and share pre-created Power BI reports for your tenant in the browser.
  4. Follow steps 2-10 above.

With a client authenticated to Azure AD, the OData URL connects to the RESTful endpoint in the Data Warehouse API that exposes the data model to your reporting client. Follow these instructions to use Power BI Desktop to connect and create your own reports. You are not limited to Power BI Desktop, but can use your favorite analytic tool with the OData URL provided the client supports OAUTH2.0 authentication and the OData v4.0 standard.

  1. Sign in to Intune.
  2. Click Set up Intune Data Warehouse under the Other tasks section on the right side of the Overview blade. The Intune Data Warehouse blade will be displayed.
  3. Retrieve the custom feed URL from the reporting blade, for example:
    https://fef.{yourinfo}.manage.microsoft.com/ReportingService/DataWarehouseFEService/dates?api-version=v1.0
  4. Open Power BI Desktop.
  5. Choose File > Get Data. Select OData feed.
  6. Choose Basic.
  7. Type or paste the OData URL into the URL box.
  8. Select OK.
  9. If you have not authenticated to Azure AD for your tenant from the Power BI desktop client, type your credentials. To gain access to your data, you must authorize with Azure Active Directory (Azure AD) using OAuth 2.0.
    1. Select Organizational account.
    2. Type your username and password.
    3. Select Sign In.
    4. Select Connect.
  10. Select Load.

Next steps

You can find the answers to questions about your environment such as the number of devices enrolled by day over the last week. You can gain insight into your Intune tenant and client population using the Intune Data Warehouse Power BI reports retrieved from the blade in Azure. However, Intune provides a number of additional ways to extend or reuse the data. Power BI and the Intune Data Warehouse API provide additional functionality, for example: